Originally Posted by 
jon1959
				 
			Doesn't the state, the UK government on behalf of UK citizens, still own nearly 40% of Nat West?
I don't understand the range of powers of the ICO to fine organisations for data breaches, but wouldn't what you are suggesting be one arm of government partly fining another arm of government? Has that happened before?
From the ICO:
For serious breaches of the data protection principles, we have the power to issue fines of up to £17.5 million or 4% of your annual worldwide turnover, whichever is higher. In line with our regulatory action policy, we take a risk-based approach to enforcement.